Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: SuperAdmin could not perform actions over entities #2609

Open
arvindh123 opened this issue Dec 19, 2024 · 1 comment · May be fixed by #2688
Open

Bug: SuperAdmin could not perform actions over entities #2609

arvindh123 opened this issue Dec 19, 2024 · 1 comment · May be fixed by #2688
Assignees
Labels

Comments

@arvindh123
Copy link
Contributor

What were you trying to achieve?

Trying to perform some actions as super admin

What are the expected results?

Perform action without authorization error

What are the received results?

I could not preform the actions , Not Authorized

Steps To Reproduce

No response

In what environment did you encounter the issue?

Docker

Additional information you deem important

It is happened due to removal of domain login and the polici

At present in spicedb we have userid prefixed with domain
Example : 0c883527-8316-4711-b7e9-ded734bf96ed_84319f2a-046a-44d7-b24c-06b15d38ac74
Here 0c883527-8316-4711-b7e9-ded734bf96ed is domain ID,
we should store without domain id prefix.

We should remove the EncodeDomainUserID at

resp.DomainUserID = auth.EncodeDomainUserID(domain, resp.UserID)

image

And then remove DomainUserID from authn.Session
at

DomainUserID string

Then we need to perform all authorization with UserID

This creates another problem of listing domain specific entities directly from spicedb

@arvindh123 arvindh123 added the bug label Dec 19, 2024
@arvindh123 arvindh123 self-assigned this Dec 19, 2024
@arvindh123
Copy link
Contributor Author

arvindh123 commented Dec 20, 2024

The proposed solution is doable only after implementing clients and channels listing without depending on SpiceDB #2606 #2605

@github-project-automation github-project-automation bot moved this to ⛏ Backlog in SuperMQ Jan 29, 2025
@felixgateru felixgateru self-assigned this Feb 7, 2025
@felixgateru felixgateru moved this from ⛏ Backlog to 🚧 In Progress in SuperMQ Feb 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: 🚧 In Progress
Development

Successfully merging a pull request may close this issue.

2 participants